Advisories · Technology

Microsoft Azure DevOps Server 2020.0.2.

Every CVE that names Microsoft Azure DevOps Server 2020.0.2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-36561 CVE record

CVSS 7.3 High

Azure DevOps Server Elevation of Privilege Vulnerability
- Microsoft Azure DevOps Server 2022.0.1
- Microsoft Azure DevOps Server 2020.0.2
- Broken access control
Not analysed yet 10 Oct 2023
CVE-2023-38155 CVE record

CVSS 7.0 High

Azure DevOps Server Remote Code Execution Vulnerability
- Microsoft Azure DevOps Server 2019.0.1
- Microsoft Azure DevOps Server 2022.0.1
- Insecure deserialization
Not analysed yet 12 Sept 2023
CVE-2023-33136 CVE record

CVSS 8.8 High

Azure DevOps Server Remote Code Execution Vulnerability
- Microsoft Azure DevOps Server 2020.0.2
- Microsoft Azure DevOps Server
- Command injection
Not analysed yet 12 Sept 2023